Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa
File:                     3230302e35332e37372e302f32342d3234203d3e20323731333136.roa (raw, json)
Hash identifier:          X1ipdbYyA0gvYxdeI8aFDgD73ImCQ+DUuOrszHZNSlA=
Subject key identifier:   66:83:99:36:EA:14:57:39:57:6F:3A:88:47:25:6F:89:72:E0:7E:3D
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       06136E7557400DDFFBDC7D080442825AEB99B579
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa
Signing time:             Tue 12 Aug 2025 18:34:44 +0000
ROA not before:           Tue 12 Aug 2025 18:29:44 +0000
ROA not after:            Tue 11 Aug 2026 18:34:44 +0000
asID:                     271316
IP address blocks:        200.53.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 12:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:13:6e:75:57:40:0d:df:fb:dc:7d:08:04:42:82:5a:eb:99:b5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Aug 12 18:29:44 2025 GMT
            Not After : Aug 11 18:34:44 2026 GMT
        Subject: CN=66839936EA145739576F3A8847256F8972E07E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:2b:4b:9b:f3:eb:27:b5:46:07:1e:69:fa:
                    96:de:10:19:d0:51:74:d0:d2:42:98:cc:43:3b:35:
                    e9:7a:a3:e0:81:a8:90:95:56:6c:c2:26:f5:5e:de:
                    16:e1:36:bc:8d:f6:d3:20:3e:89:5f:cd:b3:bb:4a:
                    5c:ca:d0:c0:15:4a:ae:75:77:e9:eb:69:dc:ba:e4:
                    35:95:ae:be:f8:0a:b7:75:9e:43:64:db:6d:dc:0b:
                    4b:12:1b:f3:68:ae:69:02:a9:90:0f:e9:59:32:56:
                    c4:39:ff:9a:22:74:ea:46:4f:9f:c0:06:f2:04:13:
                    07:27:51:9c:a0:94:ab:cf:fc:f4:f5:bc:9a:fe:49:
                    67:bd:7f:b4:a4:fa:3a:fc:2d:ca:d3:c6:d3:07:ca:
                    4f:71:f7:d1:ee:c6:0f:17:5c:47:32:d8:0d:9a:52:
                    c9:c0:21:3c:56:b7:11:e5:f9:ae:09:4c:5d:5b:7d:
                    8b:1b:a4:92:e5:21:50:f6:43:fe:4d:62:57:23:1c:
                    0a:ad:88:4a:14:e9:c5:b0:3a:85:70:8a:45:90:27:
                    ca:f7:1a:95:0a:89:b0:a2:a2:c1:b8:42:31:cb:42:
                    59:a7:a6:a6:a6:2e:34:05:50:03:d7:8b:12:68:a5:
                    01:17:83:04:f1:69:37:24:05:68:cf:16:29:00:c8:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:83:99:36:EA:14:57:39:57:6F:3A:88:47:25:6F:89:72:E0:7E:3D
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37372e302f32342d3234203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:bb:97:04:56:a5:f6:2f:b6:af:11:7b:5d:7a:ac:da:7d:55:
         d0:65:61:31:98:e1:aa:4b:ee:fb:a3:a5:57:57:32:dc:42:29:
         bd:e1:b4:b8:2e:d2:62:3a:57:9b:3f:3a:3e:c9:f9:ce:4b:48:
         02:97:01:15:52:36:06:27:90:5e:16:12:59:33:1c:80:75:41:
         9a:e8:41:35:b1:17:55:46:78:3d:b7:f8:5a:65:5a:dc:12:29:
         ec:05:af:69:09:98:67:6b:8d:21:da:27:a3:a3:68:d3:07:1e:
         06:d3:3b:3c:dc:c7:a8:9e:83:99:2b:aa:40:f9:5c:22:24:93:
         ac:26:0f:be:ca:ce:fd:ba:e6:e6:9c:a6:62:56:2b:ba:84:c8:
         cd:61:de:d1:4b:ae:c7:90:b4:7f:40:c8:10:13:7c:70:f2:95:
         87:08:c6:da:16:af:a8:3a:1c:18:4f:fe:94:5f:38:e3:99:13:
         c8:17:4f:64:e4:6b:cf:51:c2:c5:cc:1a:eb:ed:15:a8:f7:51:
         ae:64:ac:df:63:71:7b:82:20:0d:79:00:9c:c4:93:28:cb:cc:
         1a:49:42:c6:c0:49:52:a9:be:d6:1b:46:fe:0e:18:ba:ea:a1:
         53:15:6c:2b:42:30:92:e8:a4:0c:a9:f0:ff:41:19:77:7d:24:
         33:53:6a:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBhNudVdADd/73H0IBEKCWuuZtXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFODAxMjJENkRERkNBQzkwMzMyNzY5OEU3NUVGMTQw
N0ZBODE5NTAeFw0yNTA4MTIxODI5NDRaFw0yNjA4MTExODM0NDRaMDMxMTAvBgNV
BAMTKDY2ODM5OTM2RUExNDU3Mzk1NzZGM0E4ODQ3MjU2Rjg5NzJFMDdFM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcytLm/PrJ7VGBx5p+pbeEBnQ
UXTQ0kKYzEM7Nel6o+CBqJCVVmzCJvVe3hbhNryN9tMgPolfzbO7SlzK0MAVSq51
d+nrady65DWVrr74Crd1nkNk223cC0sSG/NormkCqZAP6VkyVsQ5/5oidOpGT5/A
BvIEEwcnUZyglKvP/PT1vJr+SWe9f7Sk+jr8LcrTxtMHyk9x99Huxg8XXEcy2A2a
UsnAITxWtxHl+a4JTF1bfYsbpJLlIVD2Q/5NYlcjHAqtiEoU6cWwOoVwikWQJ8r3
GpUKibCiosG4QjHLQlmnpqamLjQFUAPXixJopQEXgwTxaTckBWjPFikAyBnXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZoOZNuoUVzlXbzqIRyVviXLgfj0wHwYDVR0j
BBgwFoAUTOgBItbd/KyQMydpjnXvFAf6gZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEc0RVhvNnA1N0xDdWF4Z0hLUnNGRXZuaFAzZURVajdOaUhIR0M3MlZB
Z3MvMC80Q0U4MDEyMkQ2RERGQ0FDOTAzMzI3Njk4RTc1RUYxNDA3RkE4MTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTgwMTIyRDZEREZDQUM5
MDMzMjc2OThFNzVFRjE0MDdGQTgxOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHNEVYbzZwNTdMQ3VheGdIS1JzRkV2bmhQM2VEVWo3TmlISEdDNzJWQWdzLzAv
MzIzMDMwMmUzNTMzMmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyDVNMA0GCSqGSIb3DQEBCwUAA4IBAQDHu5cEVqX2
L7avEXtdeqzafVXQZWExmOGqS+77o6VXVzLcQim94bS4LtJiOlebPzo+yfnOS0gC
lwEVUjYGJ5BeFhJZMxyAdUGa6EE1sRdVRng9t/haZVrcEinsBa9pCZhna40h2iej
o2jTBx4G0zs83MeonoOZK6pA+VwiJJOsJg++ys79uubmnKZiViu6hMjNYd7RS67H
kLR/QMgQE3xw8pWHCMbaFq+oOhwYT/6UXzjjmRPIF09k5GvPUcLFzBrr7RWo91Gu
ZKzfY3F7giANeQCcxJMoy8waSULGwElSqb7WG0b+Dhi66qFTFWwrQjCS6KQMqfD/
QRl3fSQzU2rk
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:29 2025 by rpki-client